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DETAILED ACTION 
Priority 

1 . No claim for priority has been made in this application. 

The effective filing date for the subject matter defined in the pending claims in 
this application is 12/04/2002. 

Claim Rejections - 35 USC §112 

The following is a quotation of the first paragraph of 35 U.S.C. 112: 

The specification shall contain a written description of the invention, and of the manner and process of making 
and using it, in such full, clear, concise, and exact terms as to enable any person skilled in the art to which it pertains, or 
with which it is most nearly connected, to make and use the same and shall set forth the best mode contemplated by the 
inventor of carrying out his invention. 

2. Claim 14 is rejected under 35 U.S.C. 112, first paragraph, as failing to comply 
with the enablement requirement. The claim(s) contains subject matter which was not 
described in the specification in such a way as to enable one skilled in the art to which it 
pertains, or with which it is most nearly connected, to make and/or use the invention. 

The claim limitation of claim 14 "selecting a combination function based on the 
first generation value" is not enabled by the specification. As understood by the 
examiner, according to the paragraph [0015] of the specification, the combination 
function can combine the various values in various ways or using a value as a 
selection index to select one or more other values from a predetermined number of 
values. 
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Claim Rejections • 35 USC § 103 

The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

A person shall be entitled to a patent unless - 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set forth in 
section 102 of this title, if the differences between the subject matter sought to be patented and the prior art are 
such that the subject matter as a whole would have been obvious at the time the invention was made to a person 
having ordinary skill in the art to which said subject matter pertains. Patentability shall not be negatived by the 
manner in which the invention was made. 

3. Claims 1 - 28 and 30 - 31 are rejected under 35 U.S.C. 1 03(a) as being 
unpatentable over Weiss (PN: 4885778), in view of Kocher (PN: 6539092). 

As per claim 1 and 17, Weiss teaches a method for generating an authentication 
code associated with an entity, the method comprising the steps of: 

retrieving a stored secret associated with an entity (Weiss: Column 5 Line 40 - 
49: a seed is equivalent to a secret); 

determining a dynamic value associated with a time interval (Weiss: Column 2 
Line 5- 15); 

receiving a personal identification number (PIN) (Weiss: Column 5 Line 40 - 49); 

Weiss does not disclose expressly retrieving a first generation value indicative of 
a number of previous authentication code generations. 

Kocher teaches retrieving a first generation value indicative of a number of 
previous authentication code generations (Kocher: Column 2 Line 47 - 53, Column 5 
Line 4-5 and Column 3 Line 54 - 60: a transaction counter is equivalent to a first 
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generation value and each transaction is initiated with a new session of communication 
that requires authentication. The time interval is equivalent to depth of the counter 
(generation value) for each cycle length as taught by Kocher). 

It would have been obvious to a person of ordinary skill in the art at the time the 
invention was made to combine the teaching of Kocher within the system of Weiss 
because Kocher teaches providing a fast and efficient method for obtaining leak- 
resistant and leak-proof security mechanism during the authentication of the new 
session communications (Kocher: Column 2 Line 12-15). 

generating an authentication code by combining the stored secret, the dynamic 
value, the first generation value, and the PIN (Weiss: Column 6 Line 28 - 66; Kocher: 
Column 2 Line 47 - 53, Column 5 Line 4-5 and Column 3 Line 54 - 60); and 

generating a second generation value responsive to receipt of the PIN (Kocher: 
Column 3 Line 54 - 60; Weiss: Column 5 Line 20 - 22: a transaction counter is 
equivalent to a generation value and each transaction counter (including the 2"^ 
generation value) is initiated with a new session of communication requiring the 
authentication associated with a PIN). 

As per claim 2, Weiss as modified teaches receiving verifier information, and 
wherein the generating step comprises combining the stored secret, the dynamic value, 
the first generation value, the PIN, and the verifier information (Weiss: Column 10 Line 
49 - 60: the time offset is qualified as a verifier information during the authentication). 



Application/Control Number: 10/010,769 Page 5 

Art Unit; 2131 

As per claim 3 and 1 9, Weiss as modified teaches combining the stored secret 
and the dynamic value to form a first result; combining the verifier Information with the 
first result to form a second result; and combining the first generation value with the 
second result (Kocher: Column 2 Line 47 - 53, Column 6 Line 4-5 and Column 3 Line 
54 - 60; Weiss: Column 6 Line 28 - 66, Column 10 Line 49 - 60 and Column 7 Line 65 
- Column 8 Line 17: One of ordinary skill in the art would have expected, at the time the 
invention was made, the different sequence of combining the presented parameters to 
perform equally well and as such the combination can occur in any order). 

As per claim 4 and 20, Weiss as modified teaches combining the stored secret 
and the PIN to form a first result; combining the dynamic value with the first result to 
form a second result; and combining the first generation value with the second result 
(Kocher: Column 2 Line 47 - 53, Column 5 Line 4-5 and Column 3 Line 54 - 60; 
Weiss: Column 6 Line 28 - 66, Column 1 0 Line 49 - 60 and Column 7 Line 65 - 
Column 8 Line 17; One of ordinary skill in the art would have expected, at the time the 
invention was made, the different sequence of combining the presented parameters to 
perform equally well and as such the combination can occur in any order). 

As per claim 5 and 21, Weiss as modified teaches combining the stored secret 
and the first generation value to form a first result; combining the dynamic value with the 
first result to form a second result; and combining the PIN with the second result 
(Kocher; Column 2 Line 47 - 53, Column 5 Line 4 - 5 and Column 3 Line 54 - 60; 
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Weiss: Column 6 Line 28 - 66. Column 10 Line 49 - 60 and Column 7 Line 65 - 
Column 8 Line 17: One of ordinary skill in the art would have expected, at the time the 
invention was made, the different sequence of combining the presented parameters to 
perform equally well and as such the combination can occur in any order). 

As per claim 6 and 22, Weiss as modified teaches combining the stored secret 
and the dynamic value to form a first result; and combining the first generation value 
with the first result (Kocher: Column 2 Line 47 - 53, Column 5 Line 4-5 and Column 3 
Line 54 - 60; Weiss: Column 6 Line 28 - 66, Column 1 0 Line 49 - 60 and Column 7 
Line 65 - Column 8 Line 17: One of ordinary skill in the art would have expected, at the 
time the invention was made, the different sequence of combining the presented 
parameters to perform equally well and as such the combination can occur in any 
order). 

As per claim 7 and 23, Weiss as modified teaches combining the stored secret 
and the first generation value to form a first result; and combining the dynamic value 
with the first result (Kocher: Column 2 Line 47 - 53, Column 5 Line 4-5 and Column 3 
Line 54-60; Weiss: Column 6 Line 28 - 66, Column 10 Line 49 - 60 and Column 7 
Line 65 - Column 8 Line 17: One of ordinary skill in the art would have expected, at the 
time the invention was made, the different sequence of combining the presented 
parameters to perform equally well and as such the combination can occur in any 
order). 
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As per claim 8 and 24, Weiss as modified teaches combining the dynamic value 
and the first generation value to form a first result; and combining the stored secret with 
the first result (Kocher: Column 2 Line 47 - 53, Column 5 Line 4-5 and Column 3 Line 
54 - 60; Weiss: Column 6 Line 28 - 66, Column 10 Line 49 - 60 and Column 7 Line 65 
- Column 8 Line 17: One of ordinary skill in the art would have expected, at the time the 
invention was made, the different sequence of combining the presented parameters to 
perform equally well and as such the combination can occur in any order). 

As per claim 9 and 25, Weiss as modified teaches determining a dynamic value 
responsive to a time-based counter (Weiss: Column 6 Line 47 - 49). 

As per claim 10 and 26, Weiss as modified teaches incrementing a generation 
counter for an authentication code generated during the time interval (Kocher: Column 2 
Line 47 - 53, Column 5 Line 4-5 and Column 3 Line 54 - 60: a transaction counter is 
equivalent to a first generation value and each transaction is initiated with a new 
session of communication that requires authentication. The time interval is equivalent to 
depth of the counter (generation value) for each cycle length as taught by Kocher). 



As per claim 1 1 and 27, Weiss as modified teaches resetting the generation 
counter at the start of a second time interval (Kocher: Column 2 Line 47 - 53, Column 5 
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Line 4-5 and Column 3 Line 54 - 60: The time interval is equivalent to depth of the 
counter (generation counter value) for each cycle length as taught by Kocher). 

As per claim 12 and 28, Weiss as modified teaches displaying the authentication 
code on a display (Weiss: Column 5 Line 59 - 65). 

As per claim 13 and 30, Weiss as modified teaches the PIN is retrieved from a 
data store (Weiss: Column 5 Line 30 - 32). 

As per claim 14, Weiss as modified teaches selecting a combination function 
based on the first generation value (Weiss: Column 6 Line 28 - 66; Kocher: Column 2 
Line 47 - 53, Column 5 Line 4-5 and Column 3 Line 54 - 60: the combination function 
is alternatively determined by the generation value). 

As per claim 15, Weiss as modified teaches retrieving a stored secret comprises 
retrieving one of a plurality of stored secrets based on the first generation value (Weiss: 
Column 6 Line 28 - 66; Kocher: Column 2 Line 47 - 53, Column 5 Line 4-5 and 
Column 3 Line 54 - 60: the secret is alternatively determined by the generation value). 

As per claim 16 and 31 , Weiss as modified teaches retrieving a first generation 
value indicative of a number of previous code generations within the time interval 
(Kocher: Column 2 Line 47 - 53, Column 5 Line 4-5 and Column 3 Line 54 - 60: a 
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transaction counter is equivalent to a first generation value and each transaction is 
initiated with a new session of communication that requires authentication. The time 
interval is equivalent to depth of the counter (generation value) for each cycle length as 
taught by Kocher). 

As per claim 18, Weiss as modified teaches the PIN subsystem further 
comprises a keypad (Weiss: Column 5 Line 27 - 30). 

4. Claim 29 is rejected under 35 U.S.C. 103(a) as being unpatentable over Weiss 
(PN: 4885778), in view of Kocher (PN: 6539092), and in view of Koopman et. Al. (PN: 
5377270). 

As per claim 29, Weiss as modified does not disclose expressly the generation 
value subsystem changes the generation value upon activation of a button. 

Koopman teaches the generation value subsystem changes the generation value 
upon activation of a button (Koopman: Column 1 1 Line 36 - 38). 

It would have been obvious to a person of ordinary skill in the art at the time the 
invention was made to combine the teaching of Koopman within the system of Weiss as 
modified because Koopman teaches providing an improved remote operating system 
with an enhanced security mechanism that is extremely difficult to breach by analysis 
(Koopman: Column 2 Line 42 - 44). 
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Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Longbit Chai whose telephone number is 571-272-3788. 
The examiner can normally be reached on Monday-Friday 8:00am-4:00pm. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Ayaz R. Sheikh can be reached on 571-272-3795. The fax phone number 
for the organization where this application or proceeding is assigned is 571-273-8300. 

Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). 




Longbit Chai 
Examiner 
Art Unit 2131 
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